Description
A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Modicon M580 | all versions prior to V2.80 | — |
Advisories 2
- SEVD-2019-134-11 Multiple Vulnerabilities in Modicon Controller Products Schneider Electric CPCERT · Sep 8, 2026
- ICSA-25-114-01 Schneider Electric Modicon Controllers (Update A) CISA ICS & IT advisories · Apr 23, 2026